http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200209-034

KDE3.0.2及其早期版本的Konqueror的SSL性能不能对intermediateCA-signed证书的基本限制查证。远程攻击者借助man-in-the-middle攻击欺骗受信任的站点证书。

来源:BID
名称:5410
链接:http://www.securityfocus.com/bid/5410
来源:DEBIAN
名称:DSA-155
链接:http://www.debian.org/security/2002/dsa-155
来源:XF
名称:ssl-ca-certificate-spoofing(9776)
链接:http://xforce.iss.net/xforce/xfdb/9776
来源:www.kde.org
链接:http://www.kde.org/info/security/advisory-20020818-1.txt
来源:BUGTRAQ
名称:20020812Re:IESSLVulnerability(Konqueroraffectedtoo)
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=102918241005893&w;=2
来源:REDHAT
名称:RHSA-2002:221
链接:http://www.redhat.com/support/errata/RHSA-2002-221.html
来源:REDHAT
名称:RHSA-2002:220
链接:http://www.redhat.com/support/errata/RHSA-2002-220.html
来源:MANDRAKE
名称:MDKSA-2002:058
链接:http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:058
来源:CONECTIVA
名称:CLA-2002:519
链接:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio;=000519
来源:BUGTRAQ
名称:20020818KDESecurityAdvisory:KonquerorSSLvulnerability
链接:http://archives.neohapsis.com/archives/bugtraq/2002-08/0170.html
来源:CALDERA
名称:CSSA-2002-047.0
链接:ftp://ftp.caldera.com/pub/security/OpenLinux/